crany 👽🧡🗿 on Nostr: I generally trust '/dev/random' on modern, maintained Linux running on a 64-bit PC. ...

I generally trust '/dev/random' on modern, maintained Linux running on a 64-bit PC. no VMs. fully wiped, air gapped PC...

quoting
nevent1q…pr3h

the choice is personal

coin flips, dice, etc. are laborious setups. there are good, more practical, and confidently secure ways of automating random entropy generation using a modern computer including most mobile phone devices

the problem is those devices are designed to be hot connected to networks. hence introducing many attack vectors

one of my favorite multisig setups are start with old 64-bit PCs well wiped (storage, BIOS, CMOS) and never network connected. load a modern, maintained 64-bit Linux to generate keys and seeds

generate keys and seeds with Linux and a trusted software wallet like Sparrow, Bitcoin Core, etc (verifying each software install package!)

hand write it all and transfer one key to a hardware wallet like Trezor and others. Once hardware wallet recpvery is tested, secure or destroy paper, and wipe PC device fully (shred Linux block devices, reset PC CMOS)

repeat with diverse PCs, Linux kernels and OSes, wallet softwares, hardware wallets